Privacy policy

1. About our website

smartpatient welcomes you to our website and blog. Thank you for your interest in our company, smartpatient, and our MyTherapy platform.

The protection and confidentiality of your personal data is very important to us. We collect and use your data in strict accordance with the EU General Data Protection Regulation (GDPR).

In this Privacy Policy, we will inform you about the personal data we process, the extent to which, and the purpose for which we process this data when you use our website. You can access this Privacy Policy at any time on our website.

2. Data Controller

Data controller within the meaning of Art. 4 no. 7 GDPR is

smartpatient gmbh
Landwehrstraße 60/62
80336 München
Germany

If you have questions regarding this Privacy Policy or if you want to exercise your rights regarding the processing of your personal data as set out below, please contact us at support@mytherapyapp.com.

3. Personal Data

Subject of the data protection legislation is personal data. Personal data is any information relating to an identified or identifiable natural person. Examples of such data include your name or your email address (Art. 4 para. 1 GDPR).

4.2 Processing this data is a technical requirement for the use of the website.

5. Newsletter

5.1 Provided you have given your consent, we will send you our newsletter free of charge. In order to send you the newsletter, we require your email address. The newsletter is our medium to inform you of new functionalities, new products and to send you general information about our MyTherapy app or smartpatient.

5.2 If you have given your consent, we may use your personal data (including health-related data which you have provided us) to tailor the content of the newsletter to your needs.

5.3 You can unsubscribe from the newsletter at any time. Every newsletter will contain the information on how to unsubscribe.

6. Cookies

This website uses cookies. Cookies are small text files that are stored on your computer via your web browser (e.g. Firefox or Safari) when you visit websites. Cookies allow us to make our website userfriendly. Most cookies you receive are automatically deleted after you leave our website. Some cookies can remain stored on your computer unless you manually delete them. The remaining cookies saved by your browser allow us to recognise whether you have been a visitor to our website before. You can set up notifications for when cookies are used in general, or for certain websites as well as allow or disable certain types of cookies in certain cases. You can also set up the automatic deletion of cookies when you close your browser. Please note that by disabling cookies, the website may not function properly. Where this is legally required, we obtain your prior consent for the use of cookies.
We have listed the cookies we use below and explain which data is stored and for what purpose:

optout_googleanalyticsCookie provider: smartpatientExpiration: 2 yearsDescription: We set this cookie, if you decide against using Google Analytics („opt-out cookie“).

kirby_sessionCookie provider: smartpatientExpiration: current browser sessionDescription: We use this cookie to link multiple page visits on our site to a specific user. This is necessary e.g. to prevent misuse or to save language preference.

appbanner_statusCookie provider: smartpatientExpiration: 30 daysDescription: This cookie is set when you dismiss the app banner.

_gatCookie provider: Google AnalyticsExpiration: 1 minuteDescription: This cookie is used to throttle request to Google servers.

7. Google Analytics

This website uses Google Analytics, a web analytics service provided by Google. Google Analytics uses cookies to analyse and compile reports of users' activities on our website. These cookies save basic information, such as your IP address, which is sent to a server at Google in the United States and stored.

IP anonymization is activated for this website, meaning the last digits of IP addresses from users within Member States of the European Union (as well as for other parties to the Agree-ment on the European Economic Area) are replaced with zeroes. Only in exceptional cases will a full IP address be transferred to a U.S. Google server and be truncated there consequently.

On behalf of the website provider, Google uses this information to evaluate your activities on this website and compile site-related activity reports and other internet-related services operated by the website provider. Your IP address will not be linked to other Google services or products. You may refuse the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. Furthermore you can prevent Google’s collection and use of data (cookies and IP address) by downloading and installing the browser plug-in available under tools.google.com/dlpage/gaoptout?hl=en-GB

You may object the use of Google Analytics by clicking on the following link. An opt-out cookie will be set on the computer, which prevents the future collection of your data when visiting this website:

8. Retention period

8.1 We retain your personal data for no longer than is necessary for the purposes for which your personal data are processed.

8.2 We delete any personal data we automatically collect on you during your use of the website immediately after the information is no longer necessary to provide you access to the website. For the deletion of cookies, please refer to above section on Cookies.

8.3 We delete any personal data that you provide us for a specific purpose if this personal data is no longer needed for this purpose (e.g. we delete your email address from our newsletter database after you have unsubscribed from the newsletter).

9. Legal basis for the data processing

9.1 We process your personal data which we collect on the website either on the basis of your consent pursuant to Art. 6 para. 1 lit. a) GDPR, as necessary for the performance of providing the website to you as set out in this Privacy Policy pursuant to Art. 6 para. 1 lit. b) GDPR or for the purpose of our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR.

9.2 Where we process your personal data for the purpose of our legitimate interests pursuant to Art. 6 para. 1 lit. f) GDPR, our legitimate interests may be to continuously improve the security and usability of our website.

10. Your legal rights

10.1 Under the GDPR you have the following rights with regard to your personal data:

(a) The right to request from us access to your personal data (Art. 15 GDPR);

(b) The right to rectification or erasure of your personal data (Art. 16 and Art. 17 GDPR);

(c) The right to restriction of, or to object, the processing of your personal data (Art. 18 and Art. 21 GDPR);

(d) The right to data portability (Art. 20 GDPR).

10.2 Please note that your rights according to (b), (c) and (d) above will only exist under certain conditions pursuant to the GDPR.

10.3 You may lodge a complaint with a supervisory authority.

11. Data transfers to third countries

We might involve technical third-party providers for certain functionalities (e.g. Google Analytics as explained above) which are located in countries outside the European Economic Area (EEA). If providers located in countries outside the EEA have access to your personal data, we will take appropriate or suitable safeguards for the protection of your personal data, such as entering into Standard Data Protection Clauses pursuant to Art. 46 para. 2 lit. c) GDPR. We will provide access to the Standard Data Protection Clauses upon request.

12. Data Protection Officer

We have appointed a data protection officer. The contact details of our data protection officer are as follows: